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(54) Method for preventing or detecting fraud in an identification system 



(57) In an identification system comprising a trans- 
ponder attached or associated to an object and means 
for reading the identifying code memorised in this trans- 
ponder, additional information such as a serial number 



of the chip used in the transponder is memorised and 
transmitted with the code during reading of the trans- 
ponder. In this way, fraudulent copying of transponders 
is prevented and/or detection of such copies improved. 
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Description 

[0001] This invention relates to a method according 
to the preamble of claim 1 . Identification systems of this 
type are well known, for instance from US-patent 2 293 
399. The objects to be identified by such systems may 
be of any kind, but they often are animals, for instance 
as described in US-patent 5 21 1 1 29. No specific means 
are disclosed in the patent specifications mentioned 
above for preventing or at least detecting fraud by cop- 
ying transponders wherein the identification code of 
some valuable object such as an animal is stored. 
[0002] The transponders usually make use of inte- 
grated circuits (chips) as active elements. Of these chips 
mainly three versions exist: 

the laser programmed on wafer level. These chips 
can be looked at as invariant. 

the OTP versions (one time programmable). These 
chips are programmed sometimes before being put 
into the object to be identified and their memory 
content cannot be changed afterwards. 

the read/write (R/W) versions. These chips can, at 
least partially, be reprogrammed at any time. 

[0003] Fraud by copying the code of a specific trans- 
ponder into an OTP or R/W transponder in order to ob- 
tain two identical transponders can occur and needs to 
be made impossible. One well known approach is to use 
a secret key and some cryptographic algorithm (sym- 
metric or asymmetric) to generate a cyphrate out of a 
random number sent to the transponder as challenge. 
The cryphrate is sent back from the transponders to the 
reader. Often the code of the transponder is also used 
as input to the cryptographic algorithm. Knowing algo- 
rithm and secret key (or public key in asymmetric sys- 
tems) the reader can authenticate the transponder at 
any time. This method, however needs to make use of 
at least one secret key which needs to reside within the 
transponder memory and therefore requires sophisticat- 
ed key handling. 

[0004] EP-A-0 689 1 50 discloses a somewhat less so- 
phisticated system, wherein a radio time signal received 
at reading time as well by the transponder as by the in- 
terrogating station. This time signal is combined with the 
identification code and retransmitted from the trans- 
ponder to the interrogating station where the information 
retransmitted is analysed for reading the code. Howev- 
er, transponders are often passive elements without 
power source, the power for retransmission of the infor- 
mation being provided by the interrogating signal re- 
ceived by the transponder. It is impossible under these 
circumstances to continuously run a time clock in the 
transponder, and it is hardly possible to receive a radio 
time signal without power source in the transponder. 
Further, without cryptographic treatment of the time sig- 
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nal and code it would be possible for foreigners to de- 
termine the addition of a time signal and the code from 
the response signal of the transponder and thus to copy 
the transponder. 
5 [0005] This invention aims in providing security 
against copying without reaching the level of cryptogra- 
phy and without increased power requirement This se- 
curity is obtained by the characterising features of claim 
1. 

10 The advantage of this method is that it is not requiring 
complicated and error prone key handling and requires 
almost no computing power. The latter in contrast to 
cryptographic methods. Preferably, the method makes 
use of a chip serial number that makes the combination 

is of the code and the chip serial number almost unique 
as long as the respective chip manufacturer never pro- 
duces two identical serial numbers. By registering code 
and serial number in a database or a certificate that 
holds the data of the object to be identified and is kept 

20 separate from the object a simple copy operation into 
readily available OTP transponders becomes impossi- 
ble. 

[0006] However, to make sure that attempting fraud 
using chips with programmable serial numbers is rec- 

25 ognised, a database can be used at identification set- 
up time when the code/serial number pair is stored into 
the database. At this moment, the database can be 
searched for double serial numbers and/or codes. 
[0007] To make the serial number even more specific, 

30 a chip manufacturer identification (ID) may also be as- 
sociated to the chip and made part of the serial number 
using the above method. 

[0008] To avoid the need for reading long serial num- 
bers a checksum type information (e.g. CRC) can be 

35 generated from the serial number and used for the 
above mechanism instead of the serial number. This 
however may reduce security. If the checksum type 
number is calculated over code, serial number etc. or 
over portions of the memory or over the whole memory, 

40 jt permits consistency checking of the respective infor- 
mation as long as the algorithm for the checksum type 
number is kept secret. 

[0009] This identification of the manufacturer or the 
user of the chip may be a trademark such as the regis- 

45 tered trademark RID of applicant. 

[0010] With every code read a geographic information 
etc. can be stored into the database along with time and 
date of the read operation to facilitate plausibility 
checks. Other and additional information may be stored 

50 in the memory of the transponder. A possible method is 
described below, whereby additional information men- 
tioned therein may be omitted or replaced by other spe- 
cific information. 

55 Detailed description of th Method based on the 
example of ISO 11 784785 transponders: 

[0011] At die production time a unique die serial 
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number and a die manufacturer identification (ID) are 
attributed to every die. 

[0012] At code programming time the code, the die 
serial number, and the die manufacturer-ID are com- 
bined into a consistency check number using a specific 
method, e.g. a CRC scheme. The resulting number is 
programmed into the memory of the transponder, e.g. 
in the trailer bits and needs to be stored in the respective 
database or marked down in the animals passport, etc. 
for subsequent consistency check. 
[0013] At code read time the code, the die serial 
number, the die manufacturer-ID, and the consistency 
check number are read and the same method is applied 
to check consistency of all respective numbers. Then 
comparing the consistency check number (i.e. the 
number stored in the trailer bits) with the respective 
number in the database, in the animals passport, etc. 
the tag (transponder) can be authenticated. 
[0014] This method can prevent from copying trans- 
ponders as long as no OTP dies are available that allow 
the programming of die serial number and die manufac- 
turer-! D at code programming time. 
[0015] By storing of the respective information into a 
database with access limited to authorised personnel 
the copying of serial numbers can often be detected. 
[0016] From the above specification and from the fol- 
lowing claims it results that substantially two basic so- 
lutions are available. The first solution is based upon an 
information stored outside the transponder and the in- 
terrogating station, this information being not accessible 
during transmission of the response from the transpond- 
er, and said information being invariable and being used 
as a check basis (claim 2). 

[0017] The second solution is based onto a consist- 
ency test of two or more data stored within the trans- 
ponder, these data being connected by an algorithm out- 
side the transponder (claim 3). Therefore, no algorithm 
or key has to be stored in the transponder. 
[001 8] Of course, any combination of the first and sec- 
ond solution is feasible. A number of additional or alter- 
native measures are possible, for instance as set out 
hereinafter. 

[0019] Preferably the previous registration at identifi- 
cation set-up time may be compared to the information 
retrieved from the transponder at code-read time to dis- 
cover fraud by modification of said information or fraud 
by copying the transponder using blank chips and cop- 
ying the code leading to different serial numbers. This 
allows explicit authentication at any time. 
[0020] Further, a checksum type information may ad- 
ditionally be stored in a database not accessible by 
fraudulent personnel. 

[0021] The method for generation of a checksum type 
information may be a hashing function calculated from 
any portion of the transponder memory. The method for 
the generation of the checksum type information may 
also be a cryptographic function calculated from any 
portion of the transponder memory and making use of 
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symmetric or asymmetric keys and where only the re- 
sults of the respective calculations are stored in the 
memory of the transponder but not said keys. Hereby, 
it is of importance that no key has to be stored in the 
5 transponder. 

[0022] Another possibi lity is to store any additional in- 
formation in the memory of the transponder in such a 
way that the boundaries of the individual numbers of the 
stored additional information are not distinguishable to 
10 the not knowing. In this way the boundary between the 
checksum type information and the remaining informa- 
tion shall be obliterated in order to protect the checksum 
type information from fraudulent analysis. 



1. A method for preventing or detecting fraud in an 
identification system wherein a transponder having 

20 a memory comprising an identifying code is associ- 
ated with an object to be identified, this transponder 
being activated by an interrogating signal for trans- 
mission of said code, the so received code being 
used through registration of the code along with ob- 

25 ject information for identification of said object, 
characterised in that at least one additional infor- 
mation useful for the determination of the unique- 
ness of the transponder is memorized in said mem- 
ory, authentication of identification of said object be- 

30 ing based onto the combination of said code and 
said additional information. 

2. The method of claim 1 , wherein said additional in- 
formation is registered together with said code, au- 

35 thentication comprising comparison of said memo- 
rized code and additional information with said reg- 
istered code and additional information. 

3. The method of claim 1, wherein a consistency 
40 check is based on additional information memo- 
rized in the transponder. 

4. The method of claim 2 or 3, wherein said additional 
information is a representation of the manufacturers 

45 name or trademark. 

5. The method of claim 2 or 3, wherein said additional 
information is memorised during manufacturing of 
the transponder chip as a unique chip serial number 

50 which cannot be altered by the programmer of the 
transponder code. 

6. The method of claim 5, comparing the previous reg- 
istration at identification set-up time, where the 

55 code and serial number are registered, for double 
serial numbers to discover fraud by using chips 
which allow or enable programmable serial num- 
bers. 
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7. The method of claim 1 or 5, comparing the previous 
registration at identification set-up time to the infor- 
mation retrieved from the transponder at code-read 
time to discover fraud by modification of said infor- 
mation or fraud by copying the transponder using 
blank chips and copying the code leading to differ- 
ent serial numbers. 

8. A method according to any one of claims 1 - 3 and 
5-7, comprising integrating a die manufacturer ID 
into the serial number to avoid double serial num- 
bers from different manufacturers. 

9. A method according to claim 5, comprising using a 
checksum type information made out of the serial 
number, e.g. to gain time in reading the shorter 
checksum instead of the serial number. 

10. A method according to claim 9, comprising using a 
checksum type information made out of the serial 
number and a manufacturer identification (ID), e.g. 
to gain time in reading the shorter checksum in- 
stead of the serial number and manufacturer ID. 

1 1 . A method according to claim 1 0, wherein the check- 
sum type number is made out of the serial number, 
the manufacturer identification (ID), and the code in 
order to permit a consistency check over code, se- 
rial number, ID, and checksum type of information. 

12. Method according to claim 3, where a checksum 
type number is calculated over any portion or the 
whole memory of the transponder in order to enable 
a consistency check. 

13. A method according to claim 3, 10, 11 and 12, com- 
prising storing the checksum type information also 
into the transponder so that multiple different infor- 
mation are obtained: code, serial number, manufac- 
turers ID, and checksum, e.g. reading all multiple 
information as well as the checksum type informa- 
tion at authentication time allowing to check consist- 
ency. 

14. A method according to claim 2 and 5, comprising 
storing code and serial number in a database not 
accessible by fraudulent personnel. 



wherein said code and said additional information 
are registered in a database or in a certificate not 
accessible to non -authorised persons or in a com- 
puter database with write access only to authorized 
5 persons, in order to permit the search for double in- 
formation or inconsistent information to detect 
fraudulent action at any time using said database 
or certificate. 

10 1 8. A method according to claim 1 7, making use of time 
information, geographical information, information 
on the code-reading person or organisation and so 
on, gathered during code-read time and making 
plausibility checks possible in order to detect copies 

is of transponders. 

19. A method according to any one of claims 1 to 18, 
where the method for the generation of the check- 
sum type information is a hashing function calculat- 

20 ed from any portion of the transponder memory. 

20. A method according to any one of claims 1 to 1 9, 
where the method for the generation of the check- 
sum type information is a cryptographic function 
making use of symmetric or asymmetric keys and 
where only the results of the respective calculations 
are stored in the memory of the transponder but not 
said keys. 

21. A method according to any one of claims 1 to 20, 
where any additional information stored in the mem- 
ory of the transponder is stored in such a way that 
the boundaries of the individual numbers of the 
stored additional information are not distinguisha- 
ble to the not knowing. 
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15. A method according to claim 14, comprising addi- 
tionally storing manufacturer ID in a database not so 
accessible by fraudulent personnel. 

16. A method according to claim 9, 10, 11, 12 or 13, 
comprising additionally storing the checksum type 
information in a database not accessible by fraud- ss 
ulent personnel. 

17. A method according to any one of claims 1 to 14, 
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